The covered entity (CE), Wirt County Health Services Association dba Coplin Health Systems, reported that medical records may have been accessed at its temporarily storage facility. The protected health information (PHI) involved included names, dates of birth, claims information, Social Security Numbers, addresses, and diagnoses. The number of individuals affected was approximately 2,643. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided complimentary credit monitoring services, secured the medical records, and implemented additional physical safeguards to better protect its PHI.
